Procedures Used in this Guide

Important
This topic describes deployment of DirectAccess in Windows Server 2008 R2. For deployment of DirectAccess in Microsoft Forefront Unified Access Gateway (UAG), see the Forefront UAG DirectAccess Deployment Guide (http://go.microsoft.com/fwlink/?LinkId=179989).

The procedures in this section appear in the checklists of this guide. They should be used within the context of the checklists in which they appear. They are presented here in alphabetical order.

• Configure a CRL Distribution Point for Certificates
  
  
• Configure Active Directory Certificate Services for CRL Locations
  
  
• Configure Client Authentication and Certificate Mapping for IP-HTTPS Connections
  
  
• Configure Computer Certificate Autoenrollment
  
  
• Configure Connection Security Rules for End-to-end Access
  
  
• Configure Connection Security Rules for Traffic Between DirectAccess Clients
  
  
• Configure Corporate Connectivity Detection Settings
  
  
• Configure DirectAccess Connection Security Rules for NAP
  
  
• Configure Firewall Rules to Prevent Traffic between Proxy Servers and DirectAccess Servers
  
  
• Configure Force Tunneling for DirectAccess Clients
  
  
• Configure IIS for Network Location
  
  
• Configure Packet Filters to Allow ICMP Traffic
  
  
• Configure Packet Filters to Allow Management Traffic to DirectAccess Clients
  
  
• Configure Packet Filters to Block Access to Domain Controllers
  
  
• Configure Permissions on the Web Server Certificate Template
  
  
• Configure Settings to Confine ICMPv6 Traffic to the Intranet
  
  
• Configure Strong Certificate Revocation Checking for IPsec Authentication
  
  
• Configure the DirectAccess Server as the Network Location Server
  
  
• Configure the DirectAccess IPsec Gateway on a Different Server
  
  
• Configure the DirectAccess Setup Wizard for End-to-End Access
  
  
• Configure the DirectAccess Setup Wizard for Full Intranet Access
  
  
• Configure the DirectAccess Setup Wizard for Selected Server Access
  
  
• Configure the NRPT for an IPv6/IPv4 DNS Gateway
  
  
• Configure the NRPT with Group Policy
  
  
• Connect to the IPv6 Internet
  
  
• Create DirectAccess Groups in Active Directory
  
  
• Install a Network Location Server Certificate on the DirectAccess Server
  
  
• Install an IP-HTTPS Certificate
  
  
• Install and Configure IIS for a Network Location Server Certificate
  
  
• Install the DirectAccess Feature
  
  
• Remove ISATAP from the DNS Global Query Block List